$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2913/8B43B736FE4911EFA735AD6FC4F9AE02/7273BDA4FE4A11EF8A0EDD73C4F9AE02.roa File: 7273BDA4FE4A11EF8A0EDD73C4F9AE02.roa (raw, json) Hash identifier: Bq0VwTuy/HjIMvA2ordLHxb7v3Ro/3lxv0Qjnp2KyH4= Subject key identifier: 9E:9F:C4:4B:E2:E1:53:02:24:34:86:8A:49:DD:0A:1A:11:BB:35:41 Certificate issuer: /CN=A91C2913/serialNumber=30DFCDC892E73EE25464282742E29C567EA3CE03 Certificate serial: C3 Authority key identifier: 30:DF:CD:C8:92:E7:3E:E2:54:64:28:27:42:E2:9C:56:7E:A3:CE:03 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MN_NyJLnPuJUZCgnQuKcVn6jzgM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2913/8B43B736FE4911EFA735AD6FC4F9AE02/7273BDA4FE4A11EF8A0EDD73C4F9AE02.roa Signing time: Mon 02 Mar 2026 14:58:23 +0000 ROA not before: Fri 31 Oct 2025 06:51:19 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 18111 IP address blocks: 202.92.240.0/21 maxlen: 24 203.20.62.0/24 maxlen: 24 203.22.236.0/22 maxlen: 24 203.28.45.0/24 maxlen: 24 203.30.98.0/23 maxlen: 23 203.31.48.0/24 maxlen: 24 203.33.171.0/24 maxlen: 24 203.55.120.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2913/8B43B736FE4911EFA735AD6FC4F9AE02/MN_NyJLnPuJUZCgnQuKcVn6jzgM.crl rsync://rpki.apnic.net/member_repository/A91C2913/8B43B736FE4911EFA735AD6FC4F9AE02/MN_NyJLnPuJUZCgnQuKcVn6jzgM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MN_NyJLnPuJUZCgnQuKcVn6jzgM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 06:07:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 195 (0xc3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2913, serialNumber=30DFCDC892E73EE25464282742E29C567EA3CE03 Validity Not Before: Oct 31 06:51:19 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a5a58f-3687 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:81:53:ea:47:d2:b2:65:01:b4:89:97:de:c5: 02:82:8e:6f:85:37:53:e1:26:79:29:d1:0b:6c:7e: 82:d5:fc:7b:5e:e0:ee:e1:fc:21:9c:cd:fd:62:0e: 32:f6:34:06:d1:de:d9:e9:8b:b0:07:33:77:e3:2e: 31:67:02:49:ad:6e:17:b9:d7:81:a5:14:e4:15:8f: 9d:f1:67:15:dc:66:87:76:38:ae:8d:48:df:0d:59: d5:5e:1f:67:d1:c8:cf:74:ac:4b:ac:68:e4:45:db: 14:cc:9f:45:5a:bf:e1:48:28:f5:53:6b:1a:4e:8f: bd:cd:a3:0e:dd:56:b7:c9:eb:93:21:04:32:76:d6: a1:90:7b:71:44:bb:a3:67:b2:97:c6:a9:b7:b2:df: 21:8e:3a:df:49:12:12:ea:9b:dc:b6:07:a0:3a:80: c8:25:1f:44:ef:f5:0b:1d:17:42:4a:b5:6b:58:7b: 51:0e:26:b8:d8:85:9d:55:bc:f4:b5:52:1a:86:09: 6a:aa:5c:09:8a:99:09:22:cf:9e:37:5d:9c:11:0b: 33:9f:19:d1:f8:0f:af:44:87:3e:89:d6:dd:ca:a2: 90:53:e5:01:a3:83:70:87:dc:55:77:62:10:6f:6a: d3:0f:dc:97:48:5c:0c:08:1a:3e:b6:2e:60:31:f7: 42:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:9F:C4:4B:E2:E1:53:02:24:34:86:8A:49:DD:0A:1A:11:BB:35:41 X509v3 Authority Key Identifier: keyid:30:DF:CD:C8:92:E7:3E:E2:54:64:28:27:42:E2:9C:56:7E:A3:CE:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2913/8B43B736FE4911EFA735AD6FC4F9AE02/MN_NyJLnPuJUZCgnQuKcVn6jzgM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MN_NyJLnPuJUZCgnQuKcVn6jzgM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2913/8B43B736FE4911EFA735AD6FC4F9AE02/7273BDA4FE4A11EF8A0EDD73C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.92.240.0/21 203.20.62.0/24 203.22.236.0/22 203.28.45.0/24 203.30.98.0/23 203.31.48.0/24 203.33.171.0/24 203.55.120.0/23 Signature Algorithm: sha256WithRSAEncryption b0:30:b6:47:49:60:2f:0b:9d:46:5c:91:d8:00:72:97:4f:a2: ef:ee:d8:c9:79:34:0b:68:5d:27:86:32:d0:85:54:ad:13:0c: 4c:e9:f0:95:b3:41:b1:97:20:4e:28:8c:b4:ac:bb:6b:05:d6: 1a:ee:54:f8:3f:a2:52:37:2d:71:1f:23:9d:d0:d2:60:09:4a: 23:a1:74:8a:ea:5d:b1:82:a1:72:24:81:d4:bf:aa:cf:e2:a1: 7c:10:a0:fb:dc:ca:4c:4a:f2:f6:0c:4f:ae:04:7e:ee:c0:14: 94:cf:45:45:49:7c:05:b9:1a:3d:15:fa:c1:f7:46:f2:ac:a7: 2b:35:72:da:11:20:11:c1:f3:dc:17:5e:a3:b2:64:e1:36:f8: 57:8c:4e:86:24:b6:96:76:1b:23:ec:b7:04:9d:7f:a5:e7:95: 77:f9:41:cd:a9:aa:67:5f:87:3a:be:8a:f9:56:9a:c3:9c:bc: a7:75:c8:68:67:9e:1e:31:db:0c:21:e6:ab:02:3c:30:93:bb: 8d:4a:c3:c2:fa:6f:ef:90:7f:75:78:5d:07:58:e0:59:5d:d2: 4e:ab:2b:d5:d1:03:83:65:d9:c4:d8:4d:ae:c2:9f:b8:4e:19: 11:0e:4c:7f:a2:cd:fb:32:f1:23:99:f6:02:c7:1f:01:f9:ce: ac:76:a5:0a -----BEGIN CERTIFICATE----- MIIFZjCCBE6gAwIBAgICAMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzI5MTMxMTAvBgNVBAUTKDMwREZDREM4OTJFNzNFRTI1NDY0MjgyNzQyRTI5QzU2 N0VBM0NFMDMwHhcNMjUxMDMxMDY1MTE5WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1YTU4Zi0zNjg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsoFT6kfSsmUBtImX3sUCgo5vhTdT4SZ5KdELbH6C1fx7XuDu4fwhnM39Yg4y 9jQG0d7Z6YuwBzN34y4xZwJJrW4XudeBpRTkFY+d8WcV3GaHdjiujUjfDVnVXh9n 0cjPdKxLrGjkRdsUzJ9FWr/hSCj1U2saTo+9zaMO3Va3yeuTIQQydtahkHtxRLuj Z7KXxqm3st8hjjrfSRIS6pvctgegOoDIJR9E7/ULHRdCSrVrWHtRDia42IWdVbz0 tVIahglqqlwJipkJIs+eN12cEQsznxnR+A+vRIc+idbdyqKQU+UBo4Nwh9xVd2IQ b2rTD9yXSFwMCBo+ti5gMfdCrwIDAQABo4ICijCCAoYwHQYDVR0OBBYEFJ6fxEvi 4VMCJDSGikndChoRuzVBMB8GA1UdIwQYMBaAFDDfzciS5z7iVGQoJ0LinFZ+o84D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjkxMy84QjQzQjczNkZF NDkxMUVGQTczNUFENkZDNEY5QUUwMi9NTl9OeUpMblB1SlVaQ2duUXVLY1ZuNmp6 Z00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01OX055SkxuUHVKVVpDZ25RdUtjVm42anpnTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzI5MTMvOEI0M0I3MzZGRTQ5MTFFRkE3MzVBRDZGQzRGOUFFMDIvNzI3M0JEQTRG RTRBMTFFRjhBMEVERDczQzRGOUFFMDIucm9hMEkGCCsGAQUFBwEHAQH/BDowODA2 BAIAATAwAwQDylzwAwQAyxQ+AwQCyxbsAwQAyxwtAwQByx5iAwQAyx8wAwQAyyGr AwQByzd4MA0GCSqGSIb3DQEBCwUAA4IBAQCwMLZHSWAvC51GXJHYAHKXT6Lv7tjJ eTQLaF0nhjLQhVStEwxM6fCVs0GxlyBOKIy0rLtrBdYa7lT4P6JSNy1xHyOd0NJg CUojoXSK6l2xgqFyJIHUv6rP4qF8EKD73MpMSvL2DE+uBH7uwBSUz0VFSXwFuRo9 FfrB90byrKcrNXLaESARwfPcF16jsmThNvhXjE6GJLaWdhsj7LcEnX+l55V3+UHN qapnX4c6vor5VprDnLyndchoZ54eMdsMIearAjwwk7uNSsPC+m/vkH91eF0HWOBZ XdJOqyvV0QODZdnE2E2uwp+4ThkRDkx/os37MvEjmfYCxx8B+c6sdqUK -----END CERTIFICATE-----Generated at Thu Mar 26 19:39:01 2026 by rpki-client